Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cross-Site Scripting vulnerability in SAP NetWeaver AS JAVA (User Admin Application)
Vulnerability Description
SAP NetWeaver AS JAVA (User Admin Application) is vulnerable to stored cross site scripting vulnerability. An attacker posing as an admin can upload a photo with malicious JS content. When a victim visits the vulnerable component, the attacker can read and modify information within the scope of victim's web browser.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
SAP NetWeaver AS 代码问题漏洞
Vulnerability Description
SAP NetWeaver AS是德国思爱普（SAP）公司的一款SAP网络应用服务器。它不仅能提供网络服务，且还是SAP软件的基本平台。 SAP NetWeaver AS存在代码问题漏洞，该漏洞源于容易受到存储型跨站脚本攻击，攻击者可以上传带有恶意JS内容的照片在受害者的Web浏览器范围内读取和修改信息。
CVSS Information
N/A
Vulnerability Type
N/A